高速复杂网络环境下异常流量的检测技术探析

Analysis of abnormal traffic detection technology in high speed and complex network environment

网络的高速发展正在改变着人们的工作和生活,随着各种公共网络的开放,网络环境暴露出的安全隐患却日益突出,在丰富人们生活的同时也带来了很多负面的影响。而入侵检测系统作为继防火墙之后的第二道防线在应对高速复杂的网络环境下的异常流量起着重大的作用,对于网络流量异常的入侵检测能够有效地防御网络攻击,蠕虫病毒及网络扫描等。笔者根据复杂网络环境下的网络流量异常的检测技术进行分析,探讨入侵检测面临的问题及对策。

The rapid development of the network is changing people＇s life and work, with all kinds of public network open network environment, security risks exposed has become increasingly prominent, in the rich people＇s lives and also brought many negative effects. Abnormal traffic and intrusion detection system as the second line of defense after firewall in response to the complicated network environment plays a significant role in intrusion of network traffic anomaly detection can effectively defense network attacks, worm virus and network scanning. Based on the analysis of network traffic anomaly detection technology in complex network environment, this paper discusses the problems and Countermeasures of intrusion detection.